This document contains information for data subjects regarding the processing of their personal data in the organization, within the framework of the requirements imposed on the organization as a personal data controller by Article 13 of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as GDPR).
Who processes your data?
SEFEX – Safety film experts, s.r.o.
Rybná 716/24, Staré Město, 110 00 Prague 1
C 333558 registered at the Municipal Court in Prague
Contact e-mail: email@example.com
hereinafter referred to as “we” or “the Administrator” or “the Organisation”
What is personal information ?
Personal data is virtually any information that can directly identify a living natural person or is intended to reach such a person. Personal data can be divided into general (e.g. first and last name, age, telephone number, place of birth, personal status, etc.) and sensitive (now referred to as special categories of personal data, with only the following personal data – biometric data, trade union/political party membership, ethnic origin, philosophical beliefs, genetic data, information on convictions and criminal offences, religious beliefs, political opinions, racial origin sexual orientation/life, health status).
What is personal data processing?
Processing of personal data means a systematic activity carried out by a controller on personal data for a specific purpose. The activities referred to in the preceding sentence are, in particular: collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other disclosure, alignment or combination, restriction, erasure or destruction.
Sources and categories of personal data:
The controller processes personal data (directly from you) that you have provided to it or personal data that it has obtained on the basis of the fulfilment of your order.
Your identification and contact details and data necessary for the performance of the contract.
Lawful basis and purpose of processing
The lawful reason for processing is:
Your consent to the processing of personal data for the purpose of providing direct marketing pursuant to Article 6(1)(a) GDPR
For the purpose of concluding and performing the contract (i.e. in accordance with the provision of our services), we process your personal data in accordance with the provisions of Article 6(1)(b) GDPR. The legal basis for the processing of your general personal data is therefore the contract.
Once the contract has been fulfilled, we must archive your personal data for the period of time prescribed by the relevant legislation. Here, the legal basis for the processing of your general personal data is the fulfilment of a legal obligation, which is provided for in Article 6(1)(c) GDPR.
The purpose of processing personal data is:
Processing your order and exercising the rights and obligations arising from the contractual relationship between you and the Administrator. When you place an order, the personal data necessary for the successful execution of the order is required in accordance with Article 1(b) of the Regulation (this also includes the subsequent payment, delivery of services, handling of complaints, etc.); we use the personal data you provide to us to conclude a contract with you and, if a contract has already been concluded between us, we use it to fulfil it. The processing of the customer’s personal data is carried out without the customer’s consent, as the legal basis for the processing of their personal data for the purposes of contract performance is the specific contract between the customer and the operator. The provision of personal data is a necessary requirement for the conclusion and performance of the contract, without the provision of personal data it is not possible to conclude the contract or for the controller to fulfil its terms.
What personal data will we process and to what extent?
In order to provide you with our services, we need to know the following personal data:
General personal data : name and surname, address of residence, address of delivery of services or goods, your telephone number and e-mail,
How long will we keep the data?
We will retain your personal data for as long as we are performing our mutual contract. After the end of the contractual relationship, we will keep your personal data for as long as necessary to comply with the necessary archiving obligation under the legal regulations that require archiving (these regulations are, for example, the Accounting Act, the Value Added Tax Act, the Archives and Records Act).
To whom do we pass on your personal data?
Your personal data may be transferred to the following: legal, tax and accounting service providers, technical solution providers.
Your personal data may also be transferred to public authorities and courts, but only if a specific legal regulation so provides or you give your explicit consent.
Your personal data is always transferred to our processors on the basis of a processing contract and in accordance with the minimum standard of data protection required by the GDPR.
The controller does not disclose, publish or make available personal data to third countries
Personal data security conditions
The controller declares that it has taken appropriate personal, technical and organisational measures to ensure the protection of personal data.
The controller has taken technical measures to secure data storage and personal data storage in file form.
The controller declares that the personal data can only be accessed by persons authorised by the controller.
There is no automated decision-making or profiling in the personal data processing activities we carry out in the course of our business.
What are your rights in relation to the processing of your personal data?
Under the conditions set out in the GDPR you have:
– Right of access to your personal data under Article 15 GDPR
– Right to rectification of personal data under Article 16 GDPR
– Right to restriction of processing
– Right to erasure under Article 17 GDPR
– Right to object under Article 21 GDPR
– Right to the transfer of personal data under Article 21 GDPR
– The right to withdraw consent (electronically or to a mailing address)
– The right to lodge a complaint with the Data Protection Authority if you believe that your data protection rights have been violated.
How can you fulfil your rights?
Right of access
Upon your request, we must tell you whether or not we process your personal data. If we do process it, then you have the right to be told:
a) for what purpose we process your data,
b) the extent to which the data are processed
c) how long they will be kept
d) to whom they will be made available
e) whether you can lodge a complaint with the Data Protection Authority.
You can submit your application electronically, by email to firstname.lastname@example.org or by post to Rybná 716/24, Staré Město, 110 00 Prague 1
Right to repair
If you believe that we are processing incorrect (inaccurate) personal data, you have the right to have it corrected. If you become aware of such inaccuracy in your personal data, please let us know and we will correct it without undue delay. You can submit your request electronically, by email to email@example.com or by post to Rybná 716/24, Staré Město, 110 00 Prague 1
Right to erasure
In certain circumstances, you have the right to have us delete your personal data. You can ask us to delete your data at any time. We will delete your personal data if:
– We no longer need your personal data for the purpose for which you provided it to us,
– you withdraw your consent,
– you object to the processing of your personal data,
– we process your personal data unlawfully,
– the personal data must be erased in order to comply with a legal obligation,
– if you are a child or parent of a child who has consented to the processing of personal data via the internet.
Right to restriction of processing
You can ask us to restrict the processing of your personal data. If we comply with your request, we will only store your personal data and will not process it further. We will restrict the processing of your data if:
– Your personal data is incorrect until we have verified its accuracy,
– we process personal data unlawfully, but you do not agree to delete it and instead request that we only restrict the processing of your personal data,
– We no longer need your data but you need it to prove, exercise or defend your rights
– you object to the processing of your personal data until we have verified that our legitimate interests outweigh your reasons.
Right to data portability
You have the right to request that we provide you with your personal data in an electronic form (e.g. an XML or CSV file) that allows you to easily transfer your data to another company. You can also ask us to transfer your personal data directly to the company of your choice. We will comply with your request if you have provided us with personal data directly and have given us your consent to process it
Right to object
You have the right to object to us processing your personal data. If we process your personal data in the following cases:
– because of our legitimate interest,
– creating a customer profile,
– you can object to their processing if you have personal reasons for doing so.
How can you exercise these rights?
You can contact us with your request in any of the following ways:
By email: firstname.lastname@example.org or by post to Rybná 716/24, Staré Město, 110 00 Prague 1
If you believe that your personal data protection rights have been violated, you have the right to file a complaint with the supervisory authority, the Office for Personal Data Protection, at:
Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
Telephone: switchboard: +420 234 665 111 (does not provide consultations)
information: +420 234 665 800 (information line is available on Tuesdays and Thursdays
From 13.00 to 15.30)
Mailbox ID: qkbaa2n
update on 07.09.2023